Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CWE-120

MITRE ↗

CWE-120

900
CRITICAL
2,344
HIGH
947
MEDIUM
52
LOW
4,280 CVEs · Page 51/86
7.8
CVE-2023-32356

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m

7.8
CVE-2023-32379

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.4. An app m

7.8
CVE-2023-41064 KEV

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1

7.8
CVE-2023-39063

Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server na

7.8
CVE-2023-43907

OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.

7.8
CVE-2023-33035

Memory corruption while invoking callback function of AFE from ADSP.

7.8
CVE-2023-43896

A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary cod

7.8
CVE-2023-43250

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a crafted image file. Attacker

7.8
CVE-2023-46587

Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted

7.8
CVE-2023-33031

Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

7.8
CVE-2023-33055

Memory Corruption in Audio while invoking callback function in driver from ADSP.

7.8
CVE-2023-28546

Memory Corruption in SPS Application while exporting public key in sorter TA.

7.8
CVE-2023-33017

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

7.8
CVE-2023-33087

Memory corruption in Core while processing RX intent request.

7.7
CVE-2023-36358

TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflo

7.7
CVE-2023-49287

TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulne

7.6
CVE-2023-26075

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Ex

7.6
CVE-2023-26076

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem

7.6
CVE-2023-3725

Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem

7.6
CVE-2023-4263

Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver

7.6
CVE-2023-4257

Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows.

7.6
CVE-2023-42801

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln

7.5
CVE-2023-22399

When sFlow is enabled and it monitors a packet forwarded via ECMP, a buffer management vulnerability in the dcpfe proces

7.5
CVE-2023-22416

A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker

7.5
CVE-2023-0612

A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Affected is an unknown fun

7.5
CVE-2023-0617

A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. It has been classified as critical. This affects an unknown p

7.5
CVE-2023-22422

On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforceme

7.5
CVE-2021-37311

Buffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via crafted message to the a

7.5
CVE-2022-48260

There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device servi

7.5
CVE-2022-33213

Memory corruption in modem due to buffer overflow while processing a PPP packet

7.5
CVE-2023-27062

Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth

7.5
CVE-2023-27064

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parame

7.5
CVE-2023-27065

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName para

7.5
CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versio

7.5
CVE-2023-26767

Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the l

7.5
CVE-2023-26768

Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the c

7.5
CVE-2023-26769

Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service

7.5
CVE-2023-25664

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer

7.5
CVE-2020-23257

Buffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function

7.5
CVE-2023-27705

APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png.

7.5
CVE-2023-22915

A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50

7.5
CVE-2023-22917

A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32,

7.5
CVE-2022-44232

libming 0.4.8 0.4.8 is vulnerable to Buffer Overflow. In getInt() in decompile.c unknown type may lead to denial of serv

7.5
CVE-2023-22922

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remot

7.5
CVE-2021-44283

A buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research Institute ShieldStore com

7.5
CVE-2022-43507

Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to

7.5
CVE-2021-45345

Buffer Overflow vulnerability found in En3rgy WebcamServer v.0.5.2 allows a remote attacker to cause a denial of service

7.5
CVE-2021-46881

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma

7.5
CVE-2021-46882

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma

7.5
CVE-2021-46883

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma

Frequently Asked Questions

What is CWE-120?

CWE-120 (CWE-120) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-120?

There are 5,353 CVE records associated with CWE-120 in our database. Of these, 900 are critical severity, 2344 are high severity, and 947 are medium severity.

How can I protect against CWE-120 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-120 using AI-powered security agents.

Detect CWE-120 Vulnerabilities

CyberStrike's AI agents automatically detect cwe-120 vulnerabilities across your infrastructure.

Get Started